Krebs on Security wrote a piece on ATM skimming. A credit card skimmer is a malicious device criminals attach to a payment terminal$mdash;most commonly on ATMs and gas pumps. The emergence of chip-enabled cards was supposed to help eliminate vulnerability to identity theft and fraud because those cards could not be 'skimmed.' But fraudsters are persistent and have adapted, and they've found a way to lift information from chip cards using this new technique called 'shimming,' As Krebs points out, very often the most clever component of your typical ATM skimming attack is the hidden pinhole camera used to record customers entering their PINs. These little video bandits can be hidden 100 different ways, but they're frequently disguised as ATM security features $mdash; such as an extra PIN pad privacy cover, or an all-in-one skimmer over the green flashing card acceptance slot at the ATM."